MAL-2025-179760 Malicious code in kiut-acog-avefivubufuaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da892144da2489324798ec1a4f99c4d315f21d6cab1af1818ed7e33ef8af899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afais-fomaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf1f1c547a4c4bb85caa0e487151dec6e295fb9c510ad262f60aee7cfce19cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-module-winston-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb5ec25abac37225c8be7b23ea2da3a0519e6735cddc384929b39303ffc3671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121540 Malicious code in lisa-lupis14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac96ce43d35446c7f9f825dcf85a6b5166eda262da8ebc1c38fa01e8125d045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad_gibbon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 133917feb934e8a50f16553805db692d6b84a44f25761e38a70f68d522ed0e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108695 Malicious code in similar_grasshopper_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ef629eecbb4f6fcd0b590d1896e9ce6f68392df7089944f9c130117861c8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed6b1559da0c4b7c8d9d9c23b153645a721fe1ccea0e6c8398955ac2cbe8f1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88023 Malicious code in lutfi-keripik45-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf5623d7c292375647a5c22df5419099db7ab389f842e746349c7017fe6dcaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52646 Malicious code in vida-teh86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56bea5164a87bbc2d47629ac8005705e89ef47c55bc1417247315cff32b7d882 The package vida-teh86-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded n...